Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/d3dV-F9i1Br6ldDDQ9My5gk4FEk.roa
File: d3dV-F9i1Br6ldDDQ9My5gk4FEk.roa (raw, json)
Hash identifier: D5hjHITpq2OuWGDqz/F3KXiZU9mjTm6pBy0ZexAzEsE=
Subject key identifier: 77:77:55:F8:5F:62:D4:1A:FA:95:D0:C3:43:D3:32:E6:09:38:14:49
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 0194D4D91F42A9D84286277F909DC8C5FC0D
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/d3dV-F9i1Br6ldDDQ9My5gk4FEk.roa
Signing time: Wed 05 Feb 2025 06:43:06 +0000
ROA not before: Wed 05 Feb 2025 06:43:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51559
IP address blocks: 31.192.208.0/24 maxlen: 24
31.192.209.0/24 maxlen: 24
31.192.210.0/24 maxlen: 24
31.192.213.0/24 maxlen: 24
31.192.215.0/24 maxlen: 24
89.43.28.0/24 maxlen: 24
89.43.29.0/24 maxlen: 24
89.43.30.0/24 maxlen: 24
89.43.31.0/24 maxlen: 24
89.43.64.0/24 maxlen: 24
89.43.65.0/24 maxlen: 24
89.43.66.0/24 maxlen: 24
89.43.67.0/24 maxlen: 24
89.252.128.0/24 maxlen: 24
89.252.129.0/24 maxlen: 24
89.252.130.0/24 maxlen: 24
89.252.131.0/24 maxlen: 24
89.252.134.0/24 maxlen: 24
89.252.135.0/24 maxlen: 24
89.252.136.0/24 maxlen: 24
89.252.137.0/24 maxlen: 24
89.252.139.0/24 maxlen: 24
89.252.140.0/24 maxlen: 24
89.252.143.0/24 maxlen: 24
89.252.144.0/24 maxlen: 24
89.252.145.0/24 maxlen: 24
89.252.146.0/24 maxlen: 24
89.252.147.0/24 maxlen: 24
89.252.148.0/24 maxlen: 24
89.252.150.0/24 maxlen: 24
89.252.155.0/24 maxlen: 24
89.252.156.0/24 maxlen: 24
89.252.158.0/24 maxlen: 24
89.252.160.0/24 maxlen: 24
89.252.161.0/24 maxlen: 24
89.252.162.0/24 maxlen: 24
89.252.163.0/24 maxlen: 24
89.252.164.0/24 maxlen: 24
89.252.165.0/24 maxlen: 24
89.252.166.0/24 maxlen: 24
89.252.167.0/24 maxlen: 24
89.252.168.0/24 maxlen: 24
89.252.169.0/24 maxlen: 24
89.252.170.0/24 maxlen: 24
89.252.171.0/24 maxlen: 24
89.252.172.0/24 maxlen: 24
89.252.173.0/24 maxlen: 24
89.252.173.119/32 maxlen: 32
89.252.174.0/24 maxlen: 24
89.252.175.0/24 maxlen: 24
89.252.176.0/24 maxlen: 24
89.252.177.0/24 maxlen: 24
93.113.60.0/24 maxlen: 24
93.113.61.0/24 maxlen: 24
93.113.62.0/24 maxlen: 24
93.113.63.0/24 maxlen: 24
93.115.76.0/24 maxlen: 24
93.115.77.0/24 maxlen: 24
93.115.78.0/24 maxlen: 24
93.115.79.0/24 maxlen: 24
94.102.0.0/24 maxlen: 24
94.102.1.0/24 maxlen: 24
94.102.2.0/24 maxlen: 24
94.102.3.0/24 maxlen: 24
94.102.4.0/24 maxlen: 24
94.102.5.0/24 maxlen: 24
94.102.6.0/24 maxlen: 24
94.102.7.0/24 maxlen: 24
94.102.8.0/24 maxlen: 24
94.102.9.0/24 maxlen: 24
94.102.10.0/24 maxlen: 24
94.102.11.0/24 maxlen: 24
94.102.13.0/24 maxlen: 24
94.102.14.0/24 maxlen: 24
94.102.15.0/24 maxlen: 24
95.173.160.0/24 maxlen: 24
95.173.161.0/24 maxlen: 24
95.173.162.0/24 maxlen: 24
95.173.163.0/24 maxlen: 24
95.173.164.0/24 maxlen: 24
95.173.165.0/24 maxlen: 24
95.173.166.0/24 maxlen: 24
95.173.167.0/24 maxlen: 24
95.173.168.0/24 maxlen: 24
95.173.169.0/24 maxlen: 24
95.173.170.0/24 maxlen: 24
95.173.171.0/24 maxlen: 24
95.173.172.0/24 maxlen: 24
95.173.177.0/24 maxlen: 24
95.173.178.0/24 maxlen: 24
95.173.179.0/24 maxlen: 24
95.173.180.0/24 maxlen: 24
95.173.181.0/24 maxlen: 24
95.173.183.0/24 maxlen: 24
95.173.184.0/24 maxlen: 24
95.173.185.0/24 maxlen: 24
95.173.186.0/24 maxlen: 24
95.173.187.0/24 maxlen: 24
95.173.188.0/24 maxlen: 24
95.173.189.0/24 maxlen: 24
95.173.190.0/24 maxlen: 24
95.173.191.0/24 maxlen: 24
159.253.32.0/24 maxlen: 24
159.253.33.0/24 maxlen: 24
159.253.34.0/24 maxlen: 24
159.253.35.0/24 maxlen: 24
159.253.36.0/24 maxlen: 24
159.253.38.0/24 maxlen: 24
159.253.39.0/24 maxlen: 24
159.253.40.0/24 maxlen: 24
159.253.41.0/24 maxlen: 24
159.253.42.0/24 maxlen: 24
159.253.43.0/24 maxlen: 24
159.253.44.0/24 maxlen: 24
159.253.45.0/24 maxlen: 24
159.253.46.0/24 maxlen: 24
159.253.47.0/24 maxlen: 24
185.95.84.0/24 maxlen: 24
185.95.85.0/24 maxlen: 24
185.95.86.0/24 maxlen: 24
185.95.87.0/24 maxlen: 24
2a02:f80::/32 maxlen: 32
2a03:2100::/32 maxlen: 48
2a03:2100:1::/48 maxlen: 48
2a03:2100:2::/48 maxlen: 48
2a03:2100:3::/48 maxlen: 48
2a03:2100:4::/48 maxlen: 48
2a03:2100:5::/48 maxlen: 48
2a03:2100:6::/48 maxlen: 48
2a03:2100:7::/48 maxlen: 48
2a03:2100:8::/48 maxlen: 48
2a03:2100:9::/48 maxlen: 48
2a03:2100:a::/48 maxlen: 48
2a03:2100:b::/48 maxlen: 48
2a03:2100:c::/48 maxlen: 48
2a03:2100:d::/48 maxlen: 48
2a03:2100:e::/48 maxlen: 48
2a03:2100:f::/48 maxlen: 48
2a03:2100:10::/48 maxlen: 48
2a03:2100:11::/48 maxlen: 48
2a03:2100:12::/48 maxlen: 48
2a03:2100:13::/48 maxlen: 48
2a03:2100:14::/48 maxlen: 48
2a03:2100:15::/48 maxlen: 48
2a03:2100:16::/48 maxlen: 48
2a03:2100:17::/48 maxlen: 48
2a03:2100:18::/48 maxlen: 48
2a03:2100:19::/48 maxlen: 48
2a03:2100:1b::/48 maxlen: 48
2a03:2100:1c::/48 maxlen: 48
2a03:2100:1d::/48 maxlen: 48
2a03:2100:1e::/48 maxlen: 48
2a03:2100:1f::/48 maxlen: 48
2a03:2100:20::/48 maxlen: 48
2a03:2100:21::/48 maxlen: 48
2a03:2100:22::/48 maxlen: 48
2a03:2100:23::/48 maxlen: 48
2a03:2100:24::/48 maxlen: 48
2a03:2100:25::/48 maxlen: 48
2a03:2100:26::/48 maxlen: 48
2a03:2100:27::/48 maxlen: 48
2a03:2100:28::/48 maxlen: 48
2a03:2100:29::/48 maxlen: 48
2a03:2100:2a::/48 maxlen: 48
2a03:2100:2b::/48 maxlen: 48
2a03:2100:2c::/48 maxlen: 48
2a03:2100:2d::/48 maxlen: 48
2a03:2100:2e::/48 maxlen: 48
2a03:2100:2f::/48 maxlen: 48
2a03:2100:32::/48 maxlen: 48
2a03:2100:33::/48 maxlen: 48
2a03:2100:34::/48 maxlen: 48
2a03:2100:35::/48 maxlen: 48
2a03:2100:36::/48 maxlen: 48
2a03:2100:37::/48 maxlen: 48
2a03:2100:38::/48 maxlen: 48
2a03:2100:39::/48 maxlen: 48
2a03:2100:3a::/48 maxlen: 48
2a03:2100:3b::/48 maxlen: 48
2a03:2100:3c::/48 maxlen: 48
2a03:2100:3d::/48 maxlen: 48
2a03:2100:3e::/48 maxlen: 48
2a03:2100:3f::/48 maxlen: 48
2a03:2100:40::/48 maxlen: 48
2a03:2100:44::/48 maxlen: 48
2a03:2102:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d4:d9:1f:42:a9:d8:42:86:27:7f:90:9d:c8:c5:fc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Feb 5 06:43:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=777755f85f62d41afa95d0c343d332e609381449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:ab:a1:89:78:b9:54:67:1c:89:25:c7:05:
04:ea:6e:cf:73:77:0e:6f:71:fe:83:d1:60:73:29:
a5:4f:d6:f7:97:d3:ce:fc:47:1a:72:c5:aa:20:69:
e2:62:e1:a4:37:db:fa:99:18:1b:6e:7f:ae:5f:b4:
e1:47:a8:7c:a6:7a:d8:76:d7:9f:fb:7c:02:50:59:
cb:60:e5:bf:b1:fc:a9:a8:26:6d:2a:77:6f:6c:11:
70:4c:74:8a:b2:86:da:b0:17:6b:aa:5b:4c:25:39:
70:58:9b:7a:95:11:5d:4a:19:3e:b6:7f:5f:0a:e1:
9c:01:32:b1:a5:2c:7f:8b:22:fa:41:e5:42:d0:74:
c4:49:4e:16:fb:5d:aa:9d:b6:67:ba:4d:0a:e1:10:
43:b3:b9:82:03:11:3b:04:77:f5:ff:e3:f0:b6:69:
fb:bb:5a:f7:ec:0c:44:25:fe:0f:cf:ea:1b:15:58:
2f:5e:1e:9c:10:ec:f7:b9:40:60:c7:d1:d5:7f:4a:
ed:96:1f:df:54:2c:62:6f:7d:7a:98:9a:d2:a3:86:
d7:9f:a1:7c:d2:d8:50:11:1a:5d:a9:b5:a5:33:64:
9b:99:b0:55:b2:f9:28:ec:70:fa:98:fc:c0:94:48:
9a:a5:dc:06:45:b9:49:87:ff:59:b8:34:94:a0:c7:
16:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:77:55:F8:5F:62:D4:1A:FA:95:D0:C3:43:D3:32:E6:09:38:14:49
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/d3dV-F9i1Br6ldDDQ9My5gk4FEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.208.0-31.192.210.255
31.192.213.0/24
31.192.215.0/24
89.43.28.0/22
89.43.64.0/22
89.252.128.0/22
89.252.134.0-89.252.137.255
89.252.139.0-89.252.140.255
89.252.143.0-89.252.148.255
89.252.150.0/24
89.252.155.0-89.252.156.255
89.252.158.0/24
89.252.160.0-89.252.177.255
93.113.60.0/22
93.115.76.0/22
94.102.0.0-94.102.11.255
94.102.13.0-94.102.15.255
95.173.160.0-95.173.172.255
95.173.177.0-95.173.181.255
95.173.183.0-95.173.191.255
159.253.32.0-159.253.36.255
159.253.38.0-159.253.47.255
185.95.84.0/22
IPv6:
2a02:f80::/32
2a03:2100::/32
2a03:2102:1::/48
Signature Algorithm: sha256WithRSAEncryption
9b:ee:03:aa:35:7e:e2:d1:5a:09:de:73:9f:6d:73:76:46:01:
0d:02:23:cc:04:be:95:0f:6d:b4:27:25:f1:7c:37:2f:10:91:
e5:8a:4d:d0:5c:1f:a3:4c:38:5c:c7:d1:30:b1:cb:f6:ef:43:
3e:0e:b8:47:6a:d3:25:bf:32:d4:47:70:d7:ce:cf:e8:89:4a:
55:f8:44:26:d5:5e:97:0c:10:9f:04:24:42:f2:68:0c:a7:f6:
0e:32:7c:58:97:03:53:65:67:ae:8f:7e:59:89:ef:1c:4e:58:
ae:b8:55:7f:68:16:9f:6a:37:4e:d7:b3:84:3b:26:85:83:e2:
49:e5:69:d7:ca:4e:1d:63:5c:46:38:94:76:9d:38:25:fc:0f:
ac:bb:3f:c3:cf:bb:e3:e2:8d:72:66:d5:19:f4:c4:ea:2f:db:
60:c5:cf:78:7f:9f:9e:fb:fe:0c:d0:6e:fd:de:66:8d:d0:c6:
13:62:83:c2:9d:1a:ea:44:49:cc:b5:18:eb:23:0a:62:51:25:
66:00:07:29:26:95:2c:83:e4:b4:46:c7:17:44:06:64:97:f1:
a8:b6:07:27:7b:dc:82:80:83:c4:00:1a:39:af:c9:a9:72:d5:
fb:64:19:2d:5c:0b:43:8f:bc:4d:e9:15:19:59:05:a3:37:3f:
5d:14:62:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:18:46 2025 by rpki-client